Incident Response - Security Analyst II / Bala Cynwyd, PA

Tokio Marine Group of Companies•Lower Merion Township, PA

20h•$77,000 - $97,000

About The Position

The TMNAS IT Security Analyst II is an operational and functional resource within the Technology Security and Risk Management function of the TMNAS IT Department. The role enforces enterprise information security processes and solutions and executes the incident response and threat management programs. It coordinates and develops operational procedures and provides subject matter expertise in support of enterprise information security solutions and controls. The position monitors and triages security alerts, assesses exposure and business impact, develops a proactive threat-hunting program, and leads incident response from detection through containment and mitigation. It also performs malware analysis and forensic examinations, investigates malicious activity, and produces technical reports on malware behavior, indicators, root cause, and operational impact.

Requirements

2–5 years of relevant IT operations experience.
Experience with Microsoft Defender and Sentinel, including the ability to write moderately complex KQL queries.
Strong writing and communication skills.
Strong customer service orientation toward Business Units requiring financial consultation: responsive, consultative, collaborative, and accurate.
Ability to work with a group to set objectives and an agenda, build allegiance to those objectives, and guide and motivate achievement.
Project management skills, including planning, organizing, monitoring, and controlling projects to use resources efficiently and achieve objectives and deadlines.
Strong interpersonal relationship-building skills and ability to work constructively and collaboratively with a variety of people and groups.
Strong analytical ability to determine root causes and provide solutions.
Strategic thinking and organizational acumen to identify and maintain focus on key success factors.
Superior attention to detail.
Ability to manage multiple, competing, frequently changing, time-sensitive deadlines and priorities.
Ability to work independently and without supervision.
Ability to work and lead effectively as part of a team.
Knowledge of organizational politics and political tactics, and ability to navigate formal and informal communication and decision-making channels.
Knowledge and understanding of business concepts and processes needed to make sound decisions in the context of the company's business, and ability to apply that knowledge to diverse situations.

Nice To Haves

Bachelor's degree in engineering, computer science, mathematics, or science.
CISSP, CCSP, Security+, or CEH certification.
1–3 years of information security experience.
Experience with domain structures, user authentication, network security, and digital signatures.

Responsibilities

Monitor and triage security alerts in real time based on severity and business impact.
Assess business impact and exposure from emerging threats, vulnerabilities, and organizational risk.
Design, implement, and sustain a proactive threat-hunting program supporting continuous security improvement.
Lead incident response through continuous detection, analysis, and coordinated threat containment and mitigation.
Conduct static and dynamic malware analysis across multiple operating systems and execution environments.
Perform forensic examinations on systems, applications, and networks to identify indicators of compromise.
Produce clear technical reports detailing malware behavior, indicators, root cause, and operational impact.
Use threat intelligence and emerging adversary TTPs to develop hunt hypotheses.
Investigate malicious activity to identify exploited weaknesses, attack techniques, and system or data impact.
Conduct after-action reviews to validate analysis quality, completeness, and alignment with response standards.
Coordinate and develop operational procedures and provide subject matter expertise for enterprise information security solutions and controls.